feat: 文件存储安全加固 + 认证增强 + 媒体URL保护 + provider 重构

## 后端安全加固
- 新增 UserUploadPathResolver: 用户上传文件路径安全解析, 防目录穿越
- LocalReportFileStorage: 文件存储路径安全加固
- local_account_file_cleanup: 账号删除时文件清理逻辑增强
- AuthService: 认证逻辑增强
- file_endpoints / report_endpoints: 文件访问接口安全加固
- ai_chat_endpoints / doctor_endpoints: 接口安全调整
- Program.cs: 服务注册调整

## 前端认证与媒体
- 新增 authenticated_network_image.dart: 带认证的图片加载组件
- auth_provider: 认证状态管理大幅增强(+173)
- api_client: 网络客户端增强(+124)
- chat_provider: 聊天 provider 重构(+76)
- omron_device_provider: 蓝牙设备 provider 增强(+53)
- sse_handler: SSE 处理增强(+35)
- consultation_provider / data_providers / conversation_history_provider: 调整

## 页面调整
- remaining_pages: 健康档案/饮食记录等页面增强(+115)
- home_page / chat_messages_view: 主页微调
- doctor 端多页微调(consultations/dashboard/followups/patient_detail/profile/report_detail/reports)
- report_pages / settings_pages / notification_prefs_page: 微调
- device_scan_page / diet_capture_page / admin_home_page: 微调

## 测试
- 新增 file_path_security_tests: 文件路径安全测试
- 新增 protected_media_url_test: 媒体URL保护测试
- 新增 user_session_identity_test: 用户会话身份测试
- account_deletion_tests / application_service_tests / auth_tests: 更新

health_app/lib/pages/report/report_pages.dart

@@ -19,6 +19,7 @@ import '../../widgets/enterprise_widgets.dart';
 import '../../widgets/app_error_state.dart';
 import '../../widgets/app_empty_state.dart';
 import '../../widgets/app_toast.dart';
+import '../../widgets/authenticated_network_image.dart';
 
 const _reportPageColor = AppColors.report;
 const _reportPageSoft = Color(0xFFF0F0FF);
@@ -202,6 +203,7 @@ class ReportNotifier extends Notifier<ReportState> {
 
   @override
   ReportState build() {
+    ref.watch(userSessionIdentityProvider);
     ref.onDispose(() => _pollTimer?.cancel());
     Future.microtask(() => loadReports());
     return ReportState();
@@ -237,7 +239,7 @@ class ReportNotifier extends Notifier<ReportState> {
           title: title,
           type: m['fileType']?.toString() ?? 'Image',
           uploadedAt:
-              DateTime.tryParse(m['createdAt']?.toString() ?? '') ??
+              DateTime.tryParse(m['createdAt']?.toString() ?? '')?.toLocal() ??
               DateTime.now(),
           fileUrl: m['fileUrl']?.toString(),
           hasAnalysis: m['aiSummary'] != null,
@@ -249,7 +251,9 @@ class ReportNotifier extends Notifier<ReportState> {
           doctorComment: m['doctorComment']?.toString(),
           doctorRecommendation: m['doctorRecommendation']?.toString(),
           doctorName: m['doctorName']?.toString(),
-          reviewedAt: DateTime.tryParse(m['reviewedAt']?.toString() ?? ''),
+          reviewedAt: DateTime.tryParse(
+            m['reviewedAt']?.toString() ?? '',
+          )?.toLocal(),
         );
       }).toList();
       state = state.copyWith(
@@ -1053,8 +1057,8 @@ class _ReportOriginalPageState extends ConsumerState<ReportOriginalPage> {
       child: InteractiveViewer(
         minScale: 0.7,
         maxScale: 4,
-        child: Image.network(
-          imageUrl,
+        child: AuthenticatedNetworkImage(
+          imageUrl: imageUrl,
           key: ValueKey('$imageUrl-$_reloadToken'),
           fit: BoxFit.contain,
           loadingBuilder: (context, child, progress) {